Integrating Burp Suite DAST with Slack - Port Swigger

Summary: PortSwigger's documentation describes a Slack integration for Burp Suite DAST that sends automatic notifications to specific Slack channels when scans start, finish, or fail. Setup requires creating a Slack app, adding it to each channel that should receive notifications, and connecting it to Burp Suite DAST with an OAuth token, which the product does not currently support rotating.
Why it matters: Because the OAuth token cannot be rotated, adding new functionality or permissions to the Slack app means generating a new token and sharing it with Burp Suite DAST - a credential-handling step that lands on whoever owns the integration.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026